Overview

overview

7

Static

static

3

TH-9800 Eng 2.0.7.exe

windows10-2004-x64

7

TH-9800 Eng 2.0.7.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$SYSDIR/Msflxgrd.dll

windows10-2004-x64

3

$SYSDIR/Msflxgrd.dll

windows11-ltsc_2024-x64

3

PL2303.exe

windows10-2004-x64

7

PL2303.exe

windows11-ltsc_2024-x64

7

Program.exe

windows10-2004-x64

3

Program.exe

windows11-ltsc_2024-x64

3

uninst.exe

windows10-2004-x64

7

uninst.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    TH-9800 Eng 2.0.7.exe
  • Size 2.4MB
  • Sample260808-plvgxsde28
  • SHA256 4b8223d2da1ab38567d19add629d8f5212fe36f6663996e60832ac427e511cdd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstallerransomware

Malware Config

Targets

    • Target
      TH-9800 Eng 2.0.7.exe
    • Size 2.4MB
    • SHA256 4b8223d2da1ab38567d19add629d8f5212fe36f6663996e60832ac427e511cdd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 14KB
    • SHA256 8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $SYSDIR/Msflxgrd.ocx
    • Size 254KB
    • SHA256 36464966fbf46136ce0746c8cf419ca31360f81f06744e10d066441bc0ad5538
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      PL2303.exe
    • Size 3.0MB
    • SHA256 eb626a166f99624c12981cc5a18737af79be0441e1a4a196b587749e9e97bea2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral7behavioral8
    • Target
      Program.exe
    • Size 1.0MB
    • SHA256 e8bf5d5be8b33ac92c2ac10fea2f4351a0dde6300a6a6564edba26a726ef3640
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      uninst.exe
    • Size 57KB
    • SHA256 2ebd537a6734b06b26ad7570a1082de044f8a7e68d79b9e72d79bf5caacedfaa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryinstaller

    • Deletes itself

    • Executes dropped EXE

    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks